RHEL6-STIG icon indicating copy to clipboard operation
RHEL6-STIG copied to clipboard

Add check/fix for anti-virus (V1R20 released)

Open jamescassell opened this issue 5 years ago • 1 comments

  • [ ] V-81443 – Added Requirement to require the installation and use of antivirus leaving other configurations to the AV product STIGs. (CAT II)
  • [x] V-81445 - Added a new requirement that /dev/shm is mounted with the "nodev" option.
  • [x] V-81441 - Added a new requirement that all attempts to alter system time are audited using "adjtimex".
  • [x] V-81447 - Added a new requirement that /dev/shm is mounted with the "nosuid" option.
  • [x] V-81449 - Added a new requirement that /dev/shm is mounted with the "noexec" option.

The above fixes the V- numbering, as the DISA changelog got them shuffled. All but the first are CAT III.

jamescassell avatar Oct 25 '18 11:10 jamescassell

With outstanding PRs, this is complete w/ the exception of anti-virus. I won't have time to implement any sort of check or fix for that in the near future, so it's open for the taking.

jamescassell avatar Dec 07 '18 13:12 jamescassell